Académique Documents
Professionnel Documents
Culture Documents
com
Table of Contents
Introducing the SafeGuard Global Secure File Transfer Service (SFTP) ....................................2
The purpose of an SFTP service: .............................................................................................3
How to create a Public and Private Key pair using PuTTYgen (an RSA and DSA key
generation utility) ..................................................................................................................4
A User Guide to setting up SFTP access using the FileZilla client program............................….9
An operational guide on how to use Filezilla to transfer information to your SGWI payroll
contact .................................................................................................................................13
Frequently Asked Questions .................................................................................................16
Appendix A ...........................................................................................................................18
Appendix B ...........................................................................................................................19
Finally, this document provides details on how you should use the service once
successfully configured along with some FAQ’s.
Before access to the service can be granted, your organisation will need to issue
SGWI with the public key generated by your company for upload it into our
SFTP platform. Once uploaded, security is ensured by checking that the key
presented by your staff when they connect to our platform (this will be your
private key of the pair) matches the copy of the public key we hold. Without
this match any connection will be refused.
In addition to providing SGWI with the PUBLIC key, you will also need to provide
details of how you would like your own unique folder structure to appear on
our SFTP platform. Further guidance on this is included in Appendix B of this
document.
The following section provides guidance on how to generate a unique key pair
using freely available software. Use of this particular software is not
rescriptive but is included more as a source of background information. Your
IT team should carry out this task and will provide you with the necessary
keys for you to connect to our SFTP platform.
1. Download PuTTygen (puttygen.exe) as per the link below and run the
program.
https://the.earth.li/~sgtatham/putty/latest/w32/puttygen.exe
2. Once downloaded, run the PuTTY Key Generator program which will open
as per the screen shot below.
4. Next the key will begin to be generated and you will be asked to wait while
this process completes.
Failure to do this before issuing us the keys will mean the keys will have to be
recreated / renamed.
7. Next, save the PRIVATE key by clicking the button labeled ‘Save Private
Key’.
As with the public keys, if you wish to assign different keys to different
internal teams as per Appendix B you will need to name the various private
keys in the same format as the previous public key naming convention.
10. Please pass the PUBLIC key(s) to the SGWI contact as per the SGWI
contact listed in Appendix B. Once the service has been configured for your
access, your SGWI contact will issue you with the necessary unique
username(s) to gain access.
Please note: Please seek guidance from your own IT Department as to where
your private keys are located; typically these will be in a secure location
managed by them.
• Download and install the FileZilla client software. Note: to install this
software will require that you have administrative rights to your PC. It is
recommended that you confirm with your own IT staff if this is allowed.
http://filezilla-project.org/download.php?type=client
• Within Select page, expand ‘Connection’ – ‘FTP’ – ‘SFTP’ and click Add
Keyfile.
• Locate the previously created PRIVATE key and select ‘Open’. The location
where the private key is located
• Within Site Manager, select the button to create a new site. It would make
sense to give the site a name of SGWI.
Once the site has been created populate the General tab with the following
settings: -
Host: file.safeguardworld.com
Port: Leave blank
Server type: SFTP –SSH File Transfer Protocol
Logon type: Interactive
User: The user name issued you by SGWI (Note: This is case sensitive)
In terms of the principles of using the SFTP service once operational, please see
the guide below. Again, this is based on the FileZilla program, but the principles
remain valid for any other SFTP client program you may be using.
After starting FileZilla you will presented with the interface screen which is laid
out by way of the folder and files of your machine on the left hand side and
those of the remote machine (our SFTP server) on the right hand side. You can
navigate through the folder structure in the same way as Windows Explorer.
Select the one labeled SGWI (Note: your IT team may have given this a different
name) to establish the connection. You will notice lines of text scrolling through
the upper screen that should finish with a final status reporting ‘Connected to
file.safeguardworld.com’
For completeness, the screenshots below show some general FileZilla windows
to illustrate how a session may look. These DO NOT reflect your folders and
files.
Finally, you can click on a file, then drag the file (a box is added to the arrow
cursor) to the directory where you want to move it. The directory will be
highlighted when you are over it. Let go of the mouse button and the file will be
moved to the directory.
Please email your nominated contact that you have completed this.
Depending on at what stage in the onboarding cycle you are, this will either
be your initial contact within our Implementation team or your regular
contact within the Operations team.
You will be emailed details of the file name(s) and locations after we have
made them available for download.
To avoid confusion, we would recommend you delete all files from our SFTP
server once you have successfully downloaded them. By default, our system
will automatically clear out ALL files remaining on the system that are older
than 5 days.
Please notify your nominated contact and we will upload the file for you.
There may be an instance where a file has corrupted during the transfer
process. This would typically result in a file not opening at all or a file size
being significantly reduced from what it typically should be. If you do
experience this, notify your nominated contact within SGWI and we will
investigate matters further.
Please get in touch with your nominated contact within SGWI you will answer
your query directly.
I’m trying to connect but get prompted for a password that I have not received,
what should I do?
Protocol: TCP/SSH
Port: 22
The following information is required to allow the SGWI IT Dept to setup your
initial SFTP structure. Your nominated contact within SGWI will discuss with you
directly about completing the information to suit your own particular needs in
terms of:
Below are examples to consider in terms of both folder structure and security
partitioning:
Typically, this will configured by country with and inbound and outbound
folder beneath each.
Depending on your own circumstances, you may simply require a single user
account and associated public / private key pair that all your users’ use. This is
illustrated in the example below where all users within the client team have full
access to all country folders
folders as requested. Each team would need to be allocated its own key pair as
part of this configuration.
i.e.: in the example below, you would need to generate 3 key pairs and issue us
with the 3 public keys listed below. You yourself would need to issue the correct
corresponding private key to your own people accordingly.
XYZLtdPublicKey
XYZLtdEUROPEPublicKey
XYZLtdLATAMPublickKey